---
title: "Check whether an identity has access to a resource"
method: GET
path: "/authorization/check"
tags: ["Authorization"]
---

# Check whether an identity has access to a resource

`GET /authorization/check`

Performs an authorization check on a resource

## Query parameters

- `workspaceId` string, required
- `resourceType` string, required
- `resourceId` string
- `scope` 'read' | 'write' | 'list' | 'read_secret' | 'authorize', required
- `feature_flags` string[]
- `additional_scopes` string[]

## Response `200`

Result of the authorization check

- AuthorizationResult
  - `granted` boolean — Whether the authorization check resulted in granted authorization
  - `api_key_id` string — The verified id of the api key, if api key auth used
  - `user_id` string — The verified user id if the authentication is user based

## Other responses

- `401` — User not authenticated
- `default` — Unknown error

---

[API](https://skmtc.net/mabl/apis/mabl-api.md) · [All operations](https://skmtc.net/mabl/apis/mabl-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/mabl/mabl-api/revisions/d0fc0114da66/schema)